$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft File: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft (raw, json) Hash identifier: mWky6UbHrxxeHYJPk7FL0T+TYjjcIrvF3YOqz8txLxM= Subject key identifier: 73:04:69:43:CC:BA:6D:BA:AB:6E:7E:BF:26:D6:38:59:9C:52:95:21 Authority key identifier: C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 Certificate issuer: /CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Certificate serial: 16ECFF2E8276B897CE04728C65998D37A58281FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft Manifest number: C4 Signing time: Tue 22 Jul 2025 15:51:52 +0000 Manifest this update: Tue 22 Jul 2025 15:46:52 +0000 Manifest next update: Fri 25 Jul 2025 17:12:52 +0000 Files and hashes: 1: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl (hash: Gw+QAiIYAk0ZTyEyRS8+xrtC7SOmEY7MfR5s8YryX4U=) 2: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: ul03DJPa84uV+wn7V8w/eIH5fK3BBIC1WxDMCBsM/QQ=) 3: 3135372e36362e33382e302f32342d3234203d3e203435333035.roa (hash: cD0fi1g8RJKzuqT2bKPT18EYQnEf1eQo9O4WH9FMt7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ec:ff:2e:82:76:b8:97:ce:04:72:8c:65:99:8d:37:a5:82:81:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Validity Not Before: Jul 22 15:46:52 2025 GMT Not After : Jul 25 17:12:52 2025 GMT Subject: CN=73046943CCBA6DBAAB6E7EBF26D638599C529521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:fb:c6:4c:44:cc:9e:e8:48:bc:d9:a5:e1:c5: 2b:0d:fd:46:39:f6:cf:b5:bf:1c:ad:aa:88:e3:2d: c4:e0:2e:af:d3:b8:d3:5f:27:a2:9d:f7:a9:3c:03: 95:d1:70:a3:8b:14:cb:20:38:ed:58:be:05:f6:5a: 68:d8:00:fc:79:3a:3a:8c:e2:63:67:01:da:e8:8d: b6:3c:fa:ac:e0:8d:56:f4:f5:6c:99:e2:86:08:4d: 9e:22:06:5c:03:eb:75:a2:c4:a9:c4:2c:96:41:cd: 20:26:aa:ef:10:05:f2:0c:1f:b2:97:68:fb:1e:ed: e2:7e:71:c8:89:45:ec:44:38:35:b4:d0:ee:48:ca: 85:48:8e:b2:91:c1:1e:9f:f3:b7:b8:57:d1:14:ce: 04:37:87:a0:1a:b9:e2:49:96:84:17:ec:2e:f5:e2: fe:e4:c9:94:42:85:50:14:e8:20:d3:c0:00:6d:40: 2e:b4:a7:c3:d4:91:e5:01:ec:90:7f:fe:e8:98:17: e2:07:cc:bd:92:a1:55:e7:88:12:39:af:e7:76:4a: 5a:ec:34:87:27:6f:65:2f:a9:51:b2:9e:ce:aa:52: a4:f8:58:a4:60:7d:d2:a7:fd:ff:b2:4a:1d:72:2f: 45:3a:f1:d0:82:9a:22:fe:d7:6b:4c:f5:c1:c1:1a: f2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:04:69:43:CC:BA:6D:BA:AB:6E:7E:BF:26:D6:38:59:9C:52:95:21 X509v3 Authority Key Identifier: keyid:C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3b:4e:b8:f6:e7:ab:fe:01:2a:df:d5:eb:87:fa:b1:a6:70: 08:c0:af:d9:f7:60:5b:c8:10:aa:05:a4:fd:9d:ff:b5:72:52: 0a:d1:39:ba:4e:cf:e4:08:ce:59:98:69:4b:cb:aa:5b:ac:d4: df:01:32:07:7a:47:c9:92:18:af:0e:8a:c8:79:e7:68:41:d5: 36:de:03:5b:82:c2:09:29:63:b3:98:42:86:14:ad:e0:c2:1a: f3:63:44:c8:32:21:91:2a:9c:51:d7:f5:2c:cb:36:e5:12:83: 35:51:b1:4e:e0:7b:32:6c:45:6e:3e:64:fe:2e:1c:84:d8:14: 01:47:13:86:e0:8c:b0:96:84:e8:3d:3c:86:88:09:1b:be:5b: 62:fb:fa:e0:3a:a0:0f:62:6f:4d:b1:b1:a8:ee:24:be:6a:4b: 00:a2:0d:4e:11:18:5a:b4:6a:57:f2:7a:cc:2d:42:2a:e0:74: f9:8b:d5:18:39:a6:76:42:bd:fa:3a:6d:dc:12:91:af:a8:1c: 9d:b5:41:14:8e:6f:8f:64:9d:f6:b3:a1:ed:99:2e:8a:a1:c2: 00:fb:dd:d0:06:4f:3e:60:20:b9:03:d6:a8:2e:18:b9:49:e7: 7f:87:47:90:c4:70:31:51:85:fc:ab:06:42:06:af:83:92:8c: e0:ff:d4:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFuz/LoJ2uJfOBHKMZZmNN6WCgfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDky QUNGOEUzNjAeFw0yNTA3MjIxNTQ2NTJaFw0yNTA3MjUxNzEyNTJaMDMxMTAvBgNV BAMTKDczMDQ2OTQzQ0NCQTZEQkFBQjZFN0VCRjI2RDYzODU5OUM1Mjk1MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz+8ZMRMye6Ei82aXhxSsN/UY5 9s+1vxytqojjLcTgLq/TuNNfJ6Kd96k8A5XRcKOLFMsgOO1YvgX2WmjYAPx5OjqM 4mNnAdrojbY8+qzgjVb09WyZ4oYITZ4iBlwD63WixKnELJZBzSAmqu8QBfIMH7KX aPse7eJ+cciJRexEODW00O5IyoVIjrKRwR6f87e4V9EUzgQ3h6AaueJJloQX7C71 4v7kyZRChVAU6CDTwABtQC60p8PUkeUB7JB//uiYF+IHzL2SoVXniBI5r+d2Slrs NIcnb2UvqVGyns6qUqT4WKRgfdKn/f+ySh1yL0U68dCCmiL+12tM9cHBGvI7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcwRpQ8y6bbqrbn6/JtY4WZxSlSEwHwYDVR0j BBgwFoAUxPzcQkxbSypWPw0HJXOlSSrPjjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWIyNjdhNC01MDMwLTRhNGYtYmI4Ni03MWZkMjMwZjUzZDEvMC9DNEZDREM0MjRD NUI0QjJBNTYzRjBEMDcyNTczQTU0OTJBQ0Y4RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDkyQUNG OEUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1 NDkyQUNGOEUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAw7Trj256v+ASrf1euH+rGmcAjAr9n3YFvI EKoFpP2d/7VyUgrRObpOz+QIzlmYaUvLqlus1N8BMgd6R8mSGK8Oish552hB1Tbe A1uCwgkpY7OYQoYUreDCGvNjRMgyIZEqnFHX9SzLNuUSgzVRsU7gezJsRW4+ZP4u HITYFAFHE4bgjLCWhOg9PIaICRu+W2L7+uA6oA9ib02xsajuJL5qSwCiDU4RGFq0 alfyeswtQirgdPmL1Rg5pnZCvfo6bdwSka+oHJ21QRSOb49knfazoe2ZLoqhwgD7 3dAGTz5gILkD1qguGLlJ53+HR5DEcDFRhfyrBkIGr4OSjOD/1OA= -----END CERTIFICATE-----Generated at Thu Jul 24 13:15:55 2025 by rpki-client